Publish Date: December 21, 2022
1. Scope
Community Social Services Tracking Software, Inc. (“CSST”) is committed to protecting the privacy of individuals who visit empoworbycsst.com (“Visitors”), and the individuals who decide to utilize the services CSST provides (“Customers”).
2. Information Collected
2.1. Personally Identifiable Information
When contacting us you may provide CSST with personal contact information, such as your name, company name, address, phone number, and email address. When purchasing services, CSST may also require you to provide billing information, such as billing name and address, credit card number (“Billing Information”). When receiving services, certain personal contact information is collected for purposes of contact and validation of customer employees. This Billing Information and any other information you submit to CSST or submit through the course of our relationship are referred to collectively as “Data.”
2.2. Customer Data
CSST’ Customers may provide information regarding computer systems throughout the course of utilizing the CSST’ services (“Customer Data”). CSST may access Customer Data only for the purpose of providing or maintaining the services or addressing service or technical problems.”
3. Information We Collect
A “cookie” is a small amount of data that is sent to your browser from a web server and stored on your computer or device. Among other things, cookies allow us to facilitate the administration and improve the effectiveness of our site. You may set your browser to decline cookies.
We may also use third party analytics companies, such as Google Analytics, to analyze the usage of our Site for internal purposes. These analytics companies may use cookies and other tracking mechanisms to collect data about how you use our site and provide us with aggregate information on such usage, which helps us improve the performance of our site. Please review Google’s privacy policy to learn more about each company’s privacy practices.
Third-Party Services. When you link to the CSST Software empowOR platform with a third party service (e.g. Google or Microsoft), you direct the service to send us information such as your name, email, and photo as controlled by that service or as authorized by you via your privacy settings at that service.
4. Use of Data
CSST uses Data collected from its Customers for the purposes of executing agreed upon services. This may include but is not limited to:
• Use of phone numbers or email addresses to contact or verify Customer’s employees;
• Use of credit card or other payment information to collect payments from its Customers; and
• Use of email addresses for the purposes of marketing and/or sharing additional information about other services provided.
• Use of Information Systems’ data for the purposes of providing IT support and security services.
CSST Technologies does not and will not share, sell, rent, or trade any Data with third parties. Any information collected is for the purpose of conducting business directly with our Customers and Vendors. In accordance with local, state, or federal laws, CSST will provide appropriate disclosure of Data to law enforcement to comply with any judicial, administrative or similar proceeding or order. Additionally, such disclosure may also be made to prevent damage or injury to us or others or to protect our rights.
5. Storage and Retention of Data
Collected Data will be retained indefinitely unless specifically requested by a Customer to be disposed of unless it is affiliated with a financial transaction. CSST’ Customers can send complete deletion instructions through our Contact Us Form at empoworbycsst.com/contactus, or by emailing support@empoworbycsst.com.
Collected Data will be stored in accordance with appropriate access controls in the infrastructure or cloud services utilized by CSST. To learn more, please use the Contact Us Form at empoworbycsst.com/contactus.
6. Security
CSST Technologies takes reasonable measures to protect Data for which it is a custodian of. To learn more, please use the Contact Us Form at empoworbycsst.com/contactus. However, in the event of a data breach, CSST will provide notice no later than 72 hours after said breach has been positively confirmed to the organizations/individuals whose data may have been affected.
7. Your Data Protection rights under GDPR and CCPA
7.1. GDPR
Applicability: Citizens of the EU Countries receiving direct consumer services from CSST Technologies.
7.1.1. Rights
Every user is entitled to the following:
7.1.1.1. The right to access: You have the right to ask CSST for copies of your personal data.
7.1.1.2. The right to rectification: You have the right to request that CSST correct any information you believe to be inaccurate or incomplete.
7.1.1.3. The right to erasure: You have the right to request that CSST erase your personal data under. However, a request for erasure may be denied if your data is being used in the following:
• To exercise the right of freedom of expression and information.
• To comply with a legal obligation.
• The data is necessary for public health purposes.
• The data serves the public interest.
7.1.1.4. The right to object to processing: You have the right to object to CSST’ processing of your personal data under certain conditions.
7.1.1.5. The right to data portability: You have the right to request that CSST transfer the data that we have collected to another organization, or directly to you, under certain circumstances.
7.1.2. Exercising your data protection rights
If you would like to exercise any of the aforementioned rights, please use the Contact Us Form at empoworbycsst.com/contactus. CSST Technologies will respond to your request within one calendar month.
7.1.3. Complaints
If you wish to file a complaint due to CSST’s use of your data or CSST’s failure to provide a response to your data request, please visit this website for information on the appropriate reporting authority.
7.2. CCPA
Applicability: Citizens of the State of California receiving direct consumer services from CSST Technologies.
As such, in accordance with Section 1798.105 of the CCPA:
(d) A business or a service provider shall not be required to comply with a consumer’s request to delete the consumer’s personal information if it is necessary for the business or service provider to maintain the consumer’s personal information in order to:
(1) Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by the consumer, or reasonably anticipated within the context of a business’ ongoing business relationship with the consumer, or otherwise perform a contract between the business and the consumer.
Reference: California Consumer Privacy Act (CCPA)
CSST Technologies’ use of Customer Data is consistent with the aforementioned sections.
8. Marketing
If you have agreed to receive marketing from CSST, you may always opt out at a later date. You have the right at any time to stop CSST from contacting you for marketing purposes. If you wish to stop receiving marketing materials, please visit empoworbycsst.com/contactus or adjust your notification preferences from the link within the email directly.
9. Changes to this Policy
CSST reserves the right to change this Privacy Policy. Material changes to this Privacy Policy will be communicated through the empoworbycsst.com website at least thirty (30) business days prior to the change taking effect.
10. Questions
Please contact us regarding any question about this Privacy Policy by phone or web form located at empoworbycsst.com/contactus.